metamdeaskloigin[.]gitbook[.]io

The domain metamdeaskloigin.gitbook.io is flagged as an active credential phishing site targeting MetaMask users. The page title observed is “𝗠𝗲𝘁å𝗺å𝘀𝗸 𝗟𝗼𝗴𝗶𝗻 | us”, directly referencing the MetaMask brand. The site was registered on May 11, 2026 via a documentation hosting service and resolves to IP 104.18.40.47, which belongs to a CDN operator located in Canada. HTTPS is enforced with a certificate issued by Google Trust Services under the WE1 authority, and the server returns an HTTP 307 redirect. Infrastructure fingerprints include support for HTTP/3, HSTS, and cloud tracing, indicating deployment on a major cloud platform. Reputation checks show a Gridinsoft trust score of 0/100 and the domain appears on three security blocklists; 17 of 91 VirusTotal scanners flag it as malicious. The combination of brand‑specific page title, recent registration, low trust score, and multiple detections supports a high‑risk classification. Defenders should block the domain at the network perimeter, add it to endpoint allow‑list exclusions, and monitor DNS queries for this hostname. Continuous observation is advised to detect any shift in hosting or URL patterns.